cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1066
Views
0
Helpful
1
Replies

Firepower API - Query for MD5? Update block list to include MD5?

gbam
Level 1
Level 1

Does Firepower have the ability to query the Firepower API for an MD5 to see if FP has seen it before?

 

Does Firepower have the ability to block a given MD5 via the API?

 

 

 

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

I don't believe Cisco has exposed file checks via the API yet - at least I didn't see it referenced in the 6.3 API Guide:

 

https://www.cisco.com/c/en/us/support/security/defense-center/products-programming-reference-guides-list.html

 

If they did, it would not be MD5 since AMP (the component that handles file policies) uses exclusively SHA-256.

Review Cisco Networking products for a $25 gift card